I already had downloaded the offline file to turn off easy anti-cheat make sure cheat engine can run normally. then I try to attach the debugger on it but the game gets freeze and crash after 10 - 30 seconds every time even I have been closed the cheat engine before its happened. Also, I have use
x64dbg to find out more information about it and here is what I got:
Cheat engine:
X64dbg:
[Link]
I have not ever met this delay-crash debugger issue in other games, most of them only crash before save load or fast traveling so I have no idea how to prevent it, please someone can help me get out with it.
[Help] Elden ring attach debugger cause game crash.
-
- Noobzor
- Posts: 8
- Joined: Sat Sep 03, 2022 7:52 am
- Reputation: 0
-
- What is cheating?
- Posts: 2
- Joined: Thu Nov 21, 2024 8:46 am
- Reputation: 0
Re: [Help] Elden ring attach debugger cause game crash.
This is fairly necro, but I came across this post after initially encountering the issue and thought I should come back to it after checking it out.
Essentially, it seems that ER implemented anti-debug protection. There's one function that is called ubiquitously and seems to do some sort of debug check in the form of a repne loop that causes stack corruption when a debugger is present and, therefore, results in a return to an invalid address, causing the exception. On the current patch, it seems the main culprit for the actual exception is the call at "eldenring.exe+D6DBD9", but you could also patch the repne function itself to just immediately return.
Essentially, it seems that ER implemented anti-debug protection. There's one function that is called ubiquitously and seems to do some sort of debug check in the form of a repne loop that causes stack corruption when a debugger is present and, therefore, results in a return to an invalid address, causing the exception. On the current patch, it seems the main culprit for the actual exception is the call at "eldenring.exe+D6DBD9", but you could also patch the repne function itself to just immediately return.
-
- What is cheating?
- Posts: 2
- Joined: Thu Nov 21, 2024 8:46 am
- Reputation: 0
Re: [Help] Elden ring attach debugger cause game crash.
Forget what I said above, I looked further into it and realized the main issue is an entire anti-debug routine completely seperate from this. Essentially, it checks if a debugger is present and intentionally calls a series of sub-functions that repeatedly completely corrupt the stack (on purpose) until it crashes. The function also is responsible for updating a byte which, if not set, will cause the game to not render/run.
To fix it, here's a copy and pasteable CE script:
"
[ENABLE]
aobscanmodule(CrashRoutineCall,eldenring.exe,83 F8 FF 73 04 FF C0 89 02 4C 63 43 48 4D 03 C0 48 8B 43 10 48 8B D6 48 8B CB 42 FF 14 C0 48 63 43 4C 89 43 48 4C 39 73 60 74 2F 44 38 73 69 74 29 83 F8 14)
registersymbol(CrashRoutineCall)
CrashRoutineCall+1A:
db 90 90 90 90
aobscanmodule(ByteCheck,eldenring.exe,83 CA FF 48 8B CF E8 ???????? C6 44 24 30 01 48 8B 4B 18 80 B9 191E0000 00)
registersymbol(ByteCheck)
ByteCheck+1B:
db 90 90
aobscanmodule(SecurityCheck,eldenring.exe,48 3B 0D ???????? F2 75 12 48 C1 C1 10 66 F7 C1 FFFF F2 75 02 F2 C3 48 C1 C9 10)
registersymbol(SecurityCheck)
SecurityCheck:
db C3 90 90 90 90 90 90
[DISABLE]
CrashRoutineCall+1A:
db 42 FF 14 C0
unregistersymbol(CrashRoutineCall)
ByteCheck+1B:
db 74 14
unregistersymbol(ByteCheck)
//SecurityCheck:
//db C3 90 90 90 90 90 90
"
Edit: Included security check from previous post as well.
To fix it, here's a copy and pasteable CE script:
"
[ENABLE]
aobscanmodule(CrashRoutineCall,eldenring.exe,83 F8 FF 73 04 FF C0 89 02 4C 63 43 48 4D 03 C0 48 8B 43 10 48 8B D6 48 8B CB 42 FF 14 C0 48 63 43 4C 89 43 48 4C 39 73 60 74 2F 44 38 73 69 74 29 83 F8 14)
registersymbol(CrashRoutineCall)
CrashRoutineCall+1A:
db 90 90 90 90
aobscanmodule(ByteCheck,eldenring.exe,83 CA FF 48 8B CF E8 ???????? C6 44 24 30 01 48 8B 4B 18 80 B9 191E0000 00)
registersymbol(ByteCheck)
ByteCheck+1B:
db 90 90
aobscanmodule(SecurityCheck,eldenring.exe,48 3B 0D ???????? F2 75 12 48 C1 C1 10 66 F7 C1 FFFF F2 75 02 F2 C3 48 C1 C9 10)
registersymbol(SecurityCheck)
SecurityCheck:
db C3 90 90 90 90 90 90
[DISABLE]
CrashRoutineCall+1A:
db 42 FF 14 C0
unregistersymbol(CrashRoutineCall)
ByteCheck+1B:
db 74 14
unregistersymbol(ByteCheck)
//SecurityCheck:
//db C3 90 90 90 90 90 90
"
Edit: Included security check from previous post as well.
Who is online
Users browsing this forum: No registered users